CVE Vulnerability Advisory Database

[Affected Scope] Internal messaging components of BeyondTrust Remote Support appliances.

[Impact] Unauthenticated remote attackers can bypass authentication via origin spoofing to perform arbitrary file operations, leading to full system compromise.

[Mitigation] Immediately apply the vendor-provided security patch (KB0024066) and restrict access to the management interface.

[Affected Scope] Cisco Identity Services Engine (ISE) web-based management interface and API endpoints.

[Impact] Unauthenticated remote attackers can gain full administrative access to the device by bypassing authentication controls.

[Mitigation] Apply the latest security patches from Cisco immediately and restrict access to management interfaces via ACLs.

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to security patches.

[Impact] Unauthenticated remote attackers can manipulate the trusted policy mask via specially crafted SSH usernames, leading to full privilege escalation.

[Mitigation] Immediately upgrade to versions 6.49.21, 7.23.4, or 7.24.2 and restrict SSH access to trusted source IPs.

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific security releases.

[Impact] Unauthenticated attackers can create, overwrite, or reconstruct files within the RouterOS namespace via SSH, leading to configuration theft or system compromise.

[Mitigation] Upgrade to versions 6.49.21, 7.23.4, 7.24.2 or later, and restrict SSH access.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 152.0.7977.82

[Impact] A remote attacker can execute arbitrary code inside the browser's renderer sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (152.0.7977.82 or higher)

[Affected Scope] Unpatched active instances of Metabase Open Source and Enterprise editions

[Impact] Remote, unauthenticated attackers can inject arbitrary SQL queries, manipulate the database, and gain full administrator access to the Metabase instance

[Mitigation] Apply the official vendor security patches immediately, or restrict access to the vulnerable endpoint using a WAF or reverse proxy

[Affected Scope] Systems running VMware vCenter Server with the built-in Syslog server service enabled.

[Impact] A remote, unauthenticated attacker with network access can exploit this directory traversal vulnerability to execute arbitrary code and fully compromise the vCenter Server.

[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict network access to Syslog ports (UDP/TCP 514).

[Affected Scope] Sangoma Switchvox SMB Edition 8.3 (104997) and prior versions

[Impact] An unauthenticated remote attacker can execute arbitrary SQL statements against the backend PostgreSQL database, leading to full database compromise and remote code execution (RCE)

[Mitigation] Immediately upgrade to Switchvox version 8.4.0.2 or later, and restrict external access to the /pa endpoint

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers

[Affected Scope] Kestra open-source versions prior to 1.0.45 and 1.3.21

[Impact] Unauthenticated remote attackers can bypass authentication filters to create and execute arbitrary workflows, leading to Remote Code Execution (RCE) as root inside the worker container

[Mitigation] Immediately upgrade Kestra to version 1.0.45, 1.3.21, or higher

[Affected Scope] Joomla iCagenda extension versions prior to 3.9.15 and 4.0.8

[Impact] Unauthenticated remote attackers can bypass file upload restrictions to upload malicious PHP scripts, leading to complete system compromise via Remote Code Execution (RCE).

[Mitigation] Immediately upgrade the iCagenda extension to the patched versions (3.9.15 / 4.0.8 or higher) and disable script execution in upload directories.

[Affected Scope] SimpleHelp versions 5.5.15 and prior, and 6.0 pre-release versions with OIDC authentication configured

[Impact] Unauthenticated remote attackers can forge identity tokens to bypass authentication, gain full technician sessions, and potentially bypass multi-factor authentication (MFA)

[Mitigation] Immediately upgrade SimpleHelp to the patched version or disable OIDC authentication until the patch is applied

[Affected Scope] Ivanti Sentry versions prior to R10.5.2, R10.6.2, and R10.7.1

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions (R10.5.2, R10.6.2, R10.7.1, or higher)

[Affected Scope] Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12

[Impact] Unauthenticated remote attackers can achieve arbitrary code execution (RCE) on the target server

[Mitigation] Immediately upgrade the Mirasvit Full Page Cache Warmer module to version 1.11.12 or higher, and deploy WAF mitigation rules

[Affected Scope] Trend Micro Apex One (On-Premise) server installations.

[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.

[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.

[Affected Scope] cPanel and WHM versions after 11.40 (prior to the April 28, 2026 security update)

[Impact] Unauthenticated remote attackers can bypass the login flow to gain unauthorized administrative access to the control panel, leading to complete server compromise

[Mitigation] Immediately apply the latest security patches provided by the vendor, and restrict external access to management ports (2082, 2083, 2086, 2087) until patched

[Affected Scope] Internet Key Exchange (IKE) Extension service running on Microsoft Windows and Windows Server operating systems

[Impact] An unauthenticated remote attacker can execute arbitrary code with system/kernel privileges over the network by sending specially crafted IKE packets

[Mitigation] Apply the official Microsoft security updates immediately, and restrict external access to IKE/IPsec ports (UDP 500/4500) as a temporary workaround

[Affected Scope] Adobe Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier

[Impact] Successful exploitation allows arbitrary code execution in the context of the current user when a victim opens a specially crafted malicious PDF file

[Mitigation] Immediately apply the official Adobe security update (APSB26-43) and restrict opening untrusted PDF documents

[Affected Scope] All endpoint systems running TrueConf Client versions prior to 8.5

[Impact] Attackers manipulating the update delivery path can inject tampered payloads, leading to arbitrary code execution under the updater's privilege context

[Mitigation] Immediately upgrade TrueConf Client to version 8.5 or later to enforce proper update verification

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 146.0.7680.75

[Impact] Remote attackers can execute arbitrary code or cause a denial of service (system crash) via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (146.0.7680.75 or higher)